AppTrana WAAP Pricing | Indusface WAF

Get a free application, infrastructure and malware scan report - Scan Your Website Now

WEB APPLICATION & API PROTECTION

Pay Monthly Pay Yearly

Hide common features

Advance
$99/App/Month Billed Monthly
$1068/App Billed Yearly
Start Free

Premium
Includes SwyftComply
Custom
Book a Demo

Enterprise
Includes SwyftComply
Custom
Book a Demo

Managed Unlimited Application Security Scanning

SwyftComply - Get a Clean, Zero-Vulnerability Report in 72 Hours

Remediation Guidance to Fix Vulnerabilities

Web Application Firewall

DDoS Mitigation

Limited

Comprehensive

Protection of Origin

Bot Mitigation

Limited

Comprehensive

Managed CDN

Image Optimization

Add-On

Expert Written Custom Rules

Unlimited

False Postive Monitoring

Advance Monitoring

Named Account Manager

Quaterly Service Reviews

RBAC

SIEM

Zero Downtime Onboarding

Free SSL Certificates

Custom SSL Certificates

Uptime SLA

Pen-testing by experts

Add-On

Malware File Upload Protection

Add-On

Client-Side Protection

PCI DSS 3.2.1

24*7 ISO 27001 certified support center providing support through email, chat and phone

Pay Monthly Pay Yearly

WEB APPLICATION & API PROTECTION

Advance

Comprehensive Web App & API Security.

$99

/App/Month Billed Monthly

Start Free Trial

Premium

Includes SwyftComply

Fully Managed Web App & API Security.

Custom

Book a Demo

Enterprise

Includes SwyftComply

Fully Managed Web App & API Security for Enterprises.

Custom

Book a Demo

Risk Detection
Managed Application Security Scanning
Full Support of HTML5 , AJAX and JSON
Remediation Guidance to fix vulnerabilities
Vulnerability Revalidation Checks
Guided scans
Authenticated scans
Proof of concepts	5	Unlimited	Unlimited
Pen-testing by experts		Add-on	Add-on
Whitelisting of Vulnerabilities

Risk Protection
Client-Side Protection
Layer 7 protection
SwyftComply - Get a Clean, Zero-Vulnerability Report in 72 Hours
Virtual patching through advance security rules
Platform specific rule set
Restrict by IP & Geo
Whitelist URI & IP
Risk Prioritization
Malware File Upload Protection	Add-On	Add-On	Add-On
PCI DSS 3.2 Compliance.

DDOS Mitigation
Protection against Layer 3 & 4 attacks
Protection against large volumetric Layer 7 attacks
Geo-based DDoS Controls
Behaviour Based Layer 7 Protection
Captcha challenges
Protection of origin IP address against DDoS attacks
Protection against Hot-Linking
Behaviour Based URI Level DDoS Protection
Customize BDDoS behaviour

BOT Mitigation
Allow Good bots & Block Bot Pretender
Tor IP based detection
IP Reputation based protection
Scanner /Exploitable tools Checks
Web Scrapper Checks
Validation of bot signatures and blocking bad bots
Anomaly Behaviour Detection
Cookie Challenge based rules
User Agent Based Detection
Datacenter Based Detection
Suspicious Countries

Risk Monitoring
Guaranteed search engine access
False positive monitoring
Premium rules
DDoS Notification
Premium DDoS mitigation
Unlimited Self Managed Rules
Custom rules made by experts	2	Unlimited	Unlimited
Zero-day rule set
Instant customization and propagation of security rules
24X7 management by certified application security experts
Continuous Updates of Rules
Training
Site Availability Notification
License Utilization Notification
Attack Anomaly Notification
Latency Monitoring
Named Account Manager
Quaterly Service Review

DNS Security
Protection for DNS Hosts		Add-on	Add-on

Whole Site Acceleration
Carrier grade CDN
Content optimization
Automatic static content caching
Dynamic content caching
Manual cache purge
Custom cache header
Adv Profiling
Image Optimization	Add-On	Add-On	Add-On

Other Features
Analytics Page
Standard Reports
Integration into 3rd party CDN
360* visibility into application security posture
Highly available and scalable architecture
Zero downtime onboarding
RBAC
2FA
SIEM
Bypass mode
Log mode
Real-time logging
Support

Pricing
License per FQDN	$99.00	--	Custom
Free GB Included	30 GB	50 GB
Bandwidth per GB	$0.36	$0.36

Compare All Features

WEB APPLICATION
API

WEB APPLICATION & API PROTECTION

Advance

Comprehensive Web App & API Security.

$99

/App/Month Billed Monthly

Start Free

Premium

Fully Managed Web App & API Security.

Custom

Custom Billed Annually

Enterprise

Fully Managed Web App & API Security for Enterprises.

Custom

Custom Billed Annually

Request a Demo

Advance
Premium
Enterprise

Risk Detection
Managed Unlimited Application Security Scanning
Full Support of HTML5, AJAX and JSON
Remediation Guidance to Fix Vulnerabilities
Vulnerability Revalidation Checks
Guided scans
Authenticated scans
Proof of concepts	5
Pen-testing by experts
Whitelisting of Vulnerabilities

Risk Protection
Client-Side Protection
Layer 7 protection
SwyftComply - Get a Clean, Zero-Vulnerability Report in 72 Hours
Virtual patching through advance security rules
Platform specific rule set
Restrict by IP & Geo
Whitelist URI & IP
Risk Prioritization
Malware File Upload Protection	Add-On
PCI DSS 3.2 Compliance

DDOS Mitigation
Captcha challenges
Protection of origin IP address against DDoS attacks
Protection against Hot-Linking
Behaviour Based URI Level DDoS Protection
Customize BDDoS behaviour

BOT Mitigation
Allow Good bots & Block Bot Pretender
Tor IP Based Detection
IP Reputation based protection
Scanner /Exploitable tools Checks
Web Scrapper Checks
Validation of bot signatures and blocking bad bots
Anomaly Behaviour Detection
Cookie Challenge based rules
User Agent Based Detection
Datacenter Based Detection
Suspicious Countries

Risk Monitoring
Guaranteed search engine access
False positive monitoring
Premium rules
DDoS Notification
Premium DDoS mitigation
Unlimited Self Managed Rules
Custom rules made by experts	2
Zero-day rule set
Instant customization and propagation of security rules
24X7 management by certified application security experts
Continuous Updates of Rules
Training
Site Availability Notification
License Utilization Notification
Attack Anomaly Notification
Latency Monitoring
Named Account Manager
Quaterly Service Review

DNS Security
Protection for DNS Hosts

Whole Site Acceleration
Carrier grade CDN
Content Optimization
Automatic static content caching
Dynamic Content Caching
Manual cache purge
Custom cache header
Adv Profiling
Image Optimization	Add-on

Other Features
Analytics Page
Standard Reports
Integration Into 3rd-Party CDN
360* visibility Into Application Security Posture
Highly Available and Scalable architecture
Zero Downtime Onboarding
RBAC
2FA
SIEM
Bypass mode
Log mode
Real-time logging
Support

Pricing
License per FQDN	$99.00
Free GB Included	30 GB
Bandwidth per GB	$0.36

Risk Detection
Managed Unlimited Application Security Scanning
Full Support of HTML5, AJAX and JSON
Remediation Guidance to Fix Vulnerabilities
Vulnerability Revalidation Checks
Guided scans
Authenticated scans
Proof of concepts	Unlimited
Pen-testing by experts	Add-on
Whitelisting of Vulnerabilities

Risk Protection
Client-Side Protection
Layer 7 protection
SwyftComply - Get a Clean, Zero-Vulnerability Report in 72 Hours
Virtual patching through advance security rules
Platform specific rule set
Restrict by IP & Geo
Whitelist URI & IP
Risk Prioritization
Malware File Upload Protection	Add-On
PCI DSS 3.2 Compliance

DDOS Mitigation
Captcha challenges
Protection of origin IP address against DDoS attacks
Protection against Hot-Linking
Behaviour Based URI Level DDoS Protection
Customize BDDoS behaviour

BOT Mitigation
Allow Good bots & Block Bot Pretender
Tor IP Based Detection
IP Reputation based protection
Scanner /Exploitable tools Checks
Web Scrapper Checks
Validation of bot signatures and blocking bad bots
Anomaly Behaviour Detection
Cookie Challenge based rules
User Agent Based Detection
Datacenter Based Detection
Suspicious Countries

Risk Monitoring
Guaranteed search engine access
False positive monitoring
Premium rules
DDoS Notification
Premium DDoS mitigation
Unlimited Self Managed Rules
Custom rules made by experts	Unlimited
Zero-day rule set
Instant customization and propagation of security rules
24X7 management by certified application security experts
Continuous Updates of Rules
Training
Site Availability Notification
License Utilization Notification
Attack Anomaly Notification
Latency Monitoring
Named Account Manager
Quaterly Service Review

DNS Security
Protection for DNS Hosts	Add-On

Whole Site Acceleration
Carrier grade CDN
Content Optimization
Automatic static content caching
Dynamic Content Caching
Manual cache purge
Custom cache header
Adv Profiling
Image Optimization	Add-on

Other Features
Analytics Page
Standard Reports
Integration Into 3rd-Party CDN
360* visibility Into Application Security Posture
Highly Available and Scalable architecture
Zero Downtime Onboarding
RBAC
2FA
SIEM
Bypass mode
Log mode
Real-time logging
Support

Pricing
License per FQDN	--
Free GB Included	50 GB
Bandwidth per GB	$0.36

Risk Detection
Managed Unlimited Application Security Scanning
Full Support of HTML5, AJAX and JSON
Remediation Guidance to Fix Vulnerabilities
Vulnerability Revalidation Checks
Guided scans
Authenticated scans
Proof of concepts	Unlimited
Pen-testing by experts	Add-on
Whitelisting of Vulnerabilities

Risk Protection
Client-Side Protection
Layer 7 protection
SwyftComply - Get a Clean, Zero-Vulnerability Report in 72 Hours
Virtual patching through advance security rules
Platform specific rule set
Restrict by IP & Geo
Whitelist URI & IP
Risk Prioritization
Malware File Upload Protection	Add-On
PCI DSS 3.2 Compliance

DDOS Mitigation
Captcha challenges
Protection of origin IP address against DDoS attacks
Protection against Hot-Linking
Behaviour Based URI Level DDoS Protection
Customize BDDoS behaviour

BOT Mitigation
Allow Good bots & Block Bot Pretender
Tor IP Based Detection
IP Reputation based protection
Scanner /Exploitable tools Checks
Web Scrapper Checks
Validation of bot signatures and blocking bad bots
Anomaly Behaviour Detection
Cookie Challenge based rules
User Agent Based Detection
Datacenter Based Detection
Suspicious Countries

Risk Monitoring
Guaranteed search engine access
False positive monitoring
Premium rules
DDoS Notification
Premium DDoS mitigation
Unlimited Self Managed Rules
Custom rules made by experts	Unlimited
Zero-day rule set
Instant customization and propagation of security rules
24X7 management by certified application security experts
Continuous Updates of Rules
Training
Site Availability Notification
License Utilization Notification
Attack Anomaly Notification
Latency Monitoring
Named Account Manager
Quaterly Service Review

DNS Security
Protection for DNS Hosts	Add-On

Whole Site Acceleration
Carrier grade CDN
Content Optimization
Automatic static content caching
Dynamic Content Caching
Manual cache purge
Custom cache header
Adv Profiling
Image Optimization	Add-on

Other Features
Analytics Page
Standard Reports
Integration Into 3rd-Party CDN
360* visibility Into Application Security Posture
Highly Available and Scalable architecture
Zero Downtime Onboarding
RBAC
2FA
SIEM
Bypass mode
Log mode
Real-time logging
Support

Pricing	Per Year
License per FQDN	Custom
Free GB Included	Custom
Bandwidth per GB	Custom

Compare All Features

WEB APPLICATION
API

API SECURITY

Advance

Fully Managed Web App & API Security.

Custom

Custom Billed Annually

Start Free Trial

Premium

Fully Managed Web App & API Security.

Custom

Custom Billed Annually

Book a Demo

Enterprise

Fully Managed Web App & API Security for Enterprises.

Custom

Custom Billed Annually

Book a Demo

Advance
Premium
Enterprise

Risk Detection
Managed API Scanning	On-Demand - Unlimited
No of Application credentials	1
Coverage for OWASP Top 10 API
Manual Pen-testing by Experts	Add-on
Manual verification of vulnerabilities by experts	Unlimited
Remediation Guidance to Fix Vulnerabilities
Vulnerability Revalidation Checks	Add-on
Discover Shadow APIs

Risk Protection
Layer 7 Web Application Firewall
API Specific Rules
Zero day vulnerability Protection
Blacklisting IPs & Countries
Ability to exempt certain URIs & IPs through whitelisting
PCI DSS 3.2 Compliance
Reduce attack surface through positive security policies

DDOS Mitigation
Protection of Layer 3, 4 Volumetric Attacks
Behaviour Based Layer 7 DDOS Protection
IP Reputation
Protection of Orgin IP
Behaviour Based DDOS Protection for APIs

BOT Mitigation
Allow Good Bots/ Bot Pretender Checks
Tor IP Based Detection
Validation of bot signatures and blocking bad bots
Datacenter Based Detection
Scanner /Exploitable tools Checks
Suspicious Countries
Behaviour based detection

Risk Monitoring
24*7 management of WAF by certified application security experts
24*7 ISO 27001 certified support center with support through Email, Chat and Phone
Continuous hardware and software upgrades
Monitoring for zero day vulnerabilites & update of coverage
Monitoring for emerging threats and update for coverage
Site Availability Notifications
Protection Status Notifications
License Utilization Notifications
Continuous updates of rules and SLA based customization / propagation of security rules
Expert written custom rules	Unlimited
Training
Monitoring for False Positives in Rules
Adv DDOS Protection- Session Based tracking
Adv DDOS Host Based Monitoring
Unusual Trigger of Rule Monitoring
Latency Monitoring
Monitoring of Unusual increase in attacks
Quarterly Service Review
Service Management Support - Custom Reports
Named Account Manager

DNS Security
Protection for DNS Hosts

Other Features
Analytics Page
Standard Reports
Integration into 3rd party CDN
360* visibility into application security posture
Highly available and scalable architecture
Zero downtime onboarding
Automated whitelisting of legitimate search engines & bots
No hardware, software or tuning required
RBAC
2FA
SIEM
Customizable Reports in Portal

SSL
Free letsEncrypt DV SSL Certificate
Option to buy Entrust OV or EV certificate
Custom SSL Certificate

Pricing
License per API Host	custom
Free GB Included	50 GB
Bandwidth per GB	$0.36
No. of APIs Includedd	1

Risk Detection
Managed API Scanning	On-Demand - Unlimited
No of Application credentials	2
Coverage for OWASP Top 10 API
Manual Pen-testing by Experts	1
Manual verification of vulnerabilities by experts	Unlimited
Remediation Guidance to Fix Vulnerabilities
Vulnerability Revalidation Checks	Unlimited
Discover Shadow APIs

Risk Protection
Layer 7 Web Application Firewall
API Specific Rules
Zero day vulnerability Portection
Blacklisting IPs & Countries
Ability to exempt certain URIs & IPs through whitelisting
PCI DSS 3.2 Compliance
Reduce attack surface through positive security policies

DDOS Mitigation
Protection of Layer 3, 4 Volumetric Attacks
Behaviour Based Layer 7 DDOS Protection
IP Reputation
Protection of Orgin IP
Behaviour Based DDOS Protection for APIs

BOT Mitigation
Allow Good Bots/ Bot Pretender Checks
Tor IP Based Detection
Validation of bot signatures and blocking bad bots
Datacenter Based Detection
Scanner /Exploitable tools Checks
Suspicious Countries
Behaviour based detection

Risk Monitoring
24*7 management of WAF by certified application security experts
24*7 ISO 27001 certified support center with support through Email, Chat and Phone
Continuous hardware and software upgrades
Monitoring for zero day vulnerabilites & update of coverage
Monitoring for emerging threats and update for coverage
Site Availability Notifications
Protection Status Notifications
License Utilization Notifications
Continuous updates of rules and SLA based customization / propagation of security rules
Expert written custom rules	Unlimited
Training
Monitoring for False Positives in Rules
Adv DDOS Protection- Session Based tracking
Adv DDOS Host Based Monitoring
Unusual Trigger of Rule Monitoring
Latency Monitoring
Monitoring of Unusual increase in attacks
Quarterly Service Review
Service Management Support - Custom Reports
Named Account Manager

DNS Security
Protection for DNS Hosts	Add-on

Other Features
Analytics Page
Standard Reports
Integration into 3rd party CDN
360* visibility into application security posture
Highly available and scalable architecture
Zero downtime onboarding
Automated whitelisting of legitimate search engines & bots
No hardware, software or tuning required
RBAC
2FA
SIEM
Customizable Reports in Portal

SSL
Free letsEncrypt DV SSL Certificate
Option to buy Entrust OV or EV certificate
Custom SSL Certificate

Pricing
License per API Host	custom
Free GB Included	50 GB
Bandwidth per GB	$0.36
No. of APIs Includedd	15

Risk Detection
Managed API Scanning	On-Demand - Unlimited
No of Application credentials	2
Coverage for OWASP Top 10 API
Manual Pen-testing by Experts	Add-on
Manual verification of vulnerabilities by experts	Unlimited
Remediation Guidance to Fix Vulnerabilities
Vulnerability Revalidation Checks	Unlimited
Discover Shadow APIs

Risk Protection
Layer 7 Web Application Firewall
API Specific Rules
Zero day vulnerability Portection
Blacklisting IPs & Countries
Ability to exempt certain URIs & IPs through whitelisting
PCI DSS 3.2 Compliance
Reduce attack surface through positive security policies

DDOS Mitigation
Protection of Layer 3, 4 Volumetric Attacks
Behaviour Based Layer 7 DDOS Protection
IP Reputation
Protection of Orgin IP
Behaviour Based DDOS Protection for APIs

BOT Mitigation
Allow Good Bots/ Bot Pretender Checks
Tor IP Based Detection
Validation of bot signatures and blocking bad bots
Datacenter Based Detection
Scanner /Exploitable tools Checks
Suspicious Countries
Behaviour based detection

Risk Monitoring
24*7 management of WAF by certified application security experts
24*7 ISO 27001 certified support center with support through Email, Chat and Phone
Continuous hardware and software upgrades
Monitoring for zero day vulnerabilites & update of coverage
Monitoring for emerging threats and update for coverage
Site Availability Notifications
Protection Status Notifications
License Utilization Notifications
Continuous updates of rules and SLA based customization / propagation of security rules
Expert written custom rules	Unlimited
Training
Monitoring for False Positives in Rules
Adv DDOS Protection- Session Based tracking
Adv DDOS Host Based Monitoring
Unusual Trigger of Rule Monitoring
Latency Monitoring
Monitoring of Unusual increase in attacks
Quarterly Service Review
Service Management Support - Custom Reports
Named Account Manager

DNS Security
Protection for DNS Hosts	Add-on

Other Features
Analytics Page
Standard Reports
Integration into 3rd party CDN
360* visibility into application security posture
Highly available and scalable architecture
Zero downtime onboarding
Automated whitelisting of legitimate search engines & bots
No hardware, software or tuning required
RBAC
2FA
SIEM
Customizable Reports in Portal

SSL
Free letsEncrypt DV SSL Certificate
Option to buy Entrust OV or EV certificate
Custom SSL Certificate

Pricing	Per Year
License per API Host	Custom
Free GB Included
Bandwidth per GB
No. of APIs Included

Compare All Features

Indusface is the only cloud WAAP (WAF) vendor with 100% customer recommendation for 4 consecutive years

A Customers' Choice for 2024, 2023 and 2022 Gartner^® Peer Insights™

Products

Appsec Report

Appsec Report

Appsec Report

Pricing

Appsec Report

Partners

Appsec Report

Solutions

Appsec Report

Appsec Report

Appsec Report

Resources

Appsec Report

Appsec Report

Company

Appsec Report

Appsec Report

AppTrana WAF Pricing

5000+ customers trust us for their WEB APPLICATION & API PROTECTION needs

WEB APPLICATION & API PROTECTION

API SECURITY

API SECURITY